NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
dtt0116
Feb 02, 2021Aspirant
Drop Folder (Is it possible)
We have a need to be able to write to a folder on the NAS but to to be able to access it again from the same computer (or any computer except the admin account). Is there a way to able to write to a...
Sandshark
Feb 02, 2021Sensei
ReadyNAS does not have a built-in way to allow a user to create a file and then not be able to change it later. You could come close by creating a task that runs on the NAS or a computer on the network with an account that has special permissions that moves the file from where you dropped it and you have write permission to a location where normal users have only read permission. Just changing the file permissions usually isn't enough to prevent a user with write access to the folder from changing those permissions, though I've not tried it. It's enough to prevent unintentional changes, because it takes extra steps, but not deliberate ones.
I've not tried disabling admin's file permissions so that root would be the only one who could change or delete them. But if you know admin's password, you know root's, so I don't really see the point unless you routinely use admin credentials for file operations (which is a bad idea in an environment where you need what you are asking for).
- dtt0116Feb 02, 2021Aspirant
Thanks, that's what I thought. I am just trying to come up with a workaround so we don't have to go out and buy a new $75,000 machine to replace one that is only 5 years old. The machine programming does not have a way not to name a file the same thing, and the manufacturer says that the new software wont work (designed not to IMO) with the old hardware. Sooo... If I set up a backup job and protect the folder that it is backed up to, that would sort of accomplish what I am after, correct? For a new question, is there a setting (I don't recal seeing one) to set up a backup on a file write/change?
I uderstand about the permissions. It has me going in circles trying to get some sort protection with our current set-up.
- StephenBFeb 03, 2021Guru - Experienced User
dtt0116 wrote:
Sooo... If I set up a backup job and protect the folder that it is backed up to, that would sort of accomplish what I am after, correct?
I think this depends on your goal. For example, if this is linked to a legal requirement, then it might not. Another aspect is whether you are trying to protect the file(s) from modification, from deletion, or both.
But if your goal is simply to archive the file(s), then you can create a second share that is read-only, and use a backup job to back up the file(s) to that share. The NAS admin would still be able to modify or delete the file(s) - either through the admin web ui, or by mounting the entire data volume on a PC using the NAS admin credentials. Or through the use of SSH of course.
Another approach is to add a second device into the mix, and have that device back up the file(s) on a schedule. The NAS admin wouldn't need write access to that second device, so you'd have the ability to recover the originals if the copy on the RN212 was modified.
- SandsharkFeb 03, 2021Sensei
A lot also depends on whether you are worried about accidents or malice. It's a lot harder to protect against malice.
At my job, a user unintentionally dragged a critical folder into another, and backup jobs on all the test equipment started failing. There is no "are you sure" prompt for that, as there is with deletion, at least when the user has read/write privileges, so it's easy to do. Fortunately, I figured out what happened before we went through the process of restoring from backup or snapshot. A system like you want could have prevented that. I could have made the folder read-only to most users to help prevent it, since the data mostly comes from automated backups on the test equipment, but he had privileges in the parent folder and could have changed those permissions if he was doing that intentionally. I have to trust that everyone to whom I give rights to the share is not going to attack it with malice.
Related Content
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!